Truth Check/7 October 2026

“"at least 129,000 verified software vulnerabilities between April and July 2026" found by Glasswing partners, plus 5,500 from Anthropic's own scanning, over 33,000 rated critical or high”

The claim as it travelled: Anthropic, 6 Oct 2026; the page calls it an undercount from 33 partner reports.

The counts are Anthropic's own, and the same page calls them an undercount drawn from 33 partner reports.

Checked Against

anthropic.com ↗Primary

Read the Check

Anthropic opens three vetted tiers of cyber access to Claude: the default model is blocked on every task, the defensive tier on 46 of 50, the red-team tier on none - and partners found 129,000 verified vulnerabilities in four months

Anthropic's own page: Project Glasswing and the old verification programme merge into Defense, Red Team and Specialized Access, each with Claude Opus 5.5, Sonnet 5.5 and Mythos 5.1. Data retention is required so Anthropic can watch for misuse; the top tier is reviewed "in collaboration with the US government".

Every claim we have checked, in the Ledger.